Senior GRC Engineer: AI-Driven Compliance Architecture

Playlist; United States; On-site; USD 150,000 - 170,000; Full time

Job summary

Playlist seeks a Senior GRC Engineer to own the technical spine of its control environment, designing architecture across PCI DSS, SOC 1/2, ISO 27001, HITRUST, and NIST CSF/800-53, with OSCAL as translation layer to reduce audit burden.

You will lead the Master Control List, evidence workflows, and AI-powered GRC tooling, collaborating with Security, Legal, and Finance to align controls with business operations and scale across a multi-brand footprint.

Qualifications

• 6+ years of experience in security engineering, GRC, or compliance engineering across multiple regulatory frameworks.
• Deep knowledge of PCI DSS, SOC 1/2, HITRUST and ISO 27001 or NIST CSF/800-53.
• Experience designing or maintaining cross-framework control architectures.
• Hands-on experience with evidence requirements and control implementation.
• Proficiency with compliance automation tooling like Optro, Drata, Vanta, Hyperproof, Anecdotes.
• Ability to translate technical control design into clear implementation guidance for engineering and product teams.
• Experience building or operating agentic AI workflows in production contexts.

Responsibilities

• Design and maintain framework crosswalks and control mappings across PCI DSS, SOC 1/2, ISO 27001, HITRUST, and NIST CSF/800-53.
• Own the Master Control List including nomenclature, database architecture, and evidence linkages.
• Manage lifecycle of controls, evidence requirements, and implementations as standards evolve.
• Drive evidence automation and scalable collection workflows for audits.
• Partner with Security, Legal, and Finance to align controls with business operations.
• Design, build, and maintain AI-powered GRC tooling and pipelines for risk quantification and monitoring.
• Identify rationalization opportunities across frameworks to minimize incremental work.

Skills

Security engineering

Regulatory frameworks

Control frameworks

Evidence management

Compliance automation tools

Implementation guidance

Agentic AI workflows

Education

Certifications such as CISA, CISSP, ISO 27001 Lead Implementer, CCSFP, PCI ISA

Tools

AWS (Lambda, Step Functions, EventBridge, S3, Aurora/RDS)

Job description

Playlist seeks a Senior GRC Engineer to own the technical spine of its control environment, designing architecture across PCI DSS, SOC 1/2, ISO 27001, HITRUST, and NIST CSF/800-53, with OSCAL as translation layer to reduce audit burden.

You will lead the Master Control List, evidence workflows, and AI-powered GRC tooling, collaborating with Security, Legal, and Finance to align controls with business operations and scale across a multi-brand footprint.